Page 3
No they do not. They only send an annual letter to subsidiaries to remind them of their obligations.
Agree there is not a risk monitoring mechanism.
P. 3 There is reference to the standard terms and conditions used by the Procurement function which oblige suppliers to "permit audits and allow access to office/work locations, documentation and personnel". But not a mandatory, nor continuously monitoring system.